Method for secure transfer of messages

ABSTRACT

The present invention may be deployed in a system for broadcast of conditional access content where it is desirable to detect and take action against receiver equipment which has been used in a control word sharing activity. By requiring that receiver equipment used in the system send a message to a broadcaster of conditional access content at a precise time, the invention provides a method for the server to detect receiver equipment involved in control word sharing activity and to inhibit that receiver&#39;s ability to further access the content.

CROSS-REFERENCE TO RELATED APPLICATIONS

This is a continuation application of application Ser. No. 13/175,329, filed Jul. 1, 2011, which claims priority under 35 U.S.C. Section 119 to European Patent Application Number EP10169111.1, entitled “A METHOD FOR SECURE TRANSFER OF MESSAGES”, filed on Jul. 9, 2010, the contents of which are hereby incorporated by reference herein.

INTRODUCTION

The present invention relates to the domain of conditional access systems and more particularly to methods for securing the transfer of secret keys for decrypting encrypted data.

STATE OF THE ART

In technical domains such as digital television broadcast, audio and/or video distribution and the like, where content of value is to be delivered to a plurality of points of use, conditional access systems are generally employed to ensure that the content can only be accessed at those points of use which are deemed to be legitimate points of use and not at any other point. By legitimate point of use it is usually taken to mean on a piece of equipment which is authorised to receive and consume such content, usually by the payment of a subscription to the owner of the content.

Indeed in the domain of pay-TV for example, content is usually encrypted under control words before being broadcast to a plurality of potential viewers. The control words are also broadcast in encrypted form in security messages along with the encrypted content. Thanks to the conditional access systems commonly used throughout the industry, only those viewers who are in possession of an appropriate decoder and who have paid for the rights to view the encrypted content will be allowed to have access to the control words thus allowing them to decrypt the encrypted content.

State of the art conditional access systems allowing for encrypted content to be broadcast to a plurality of receivers equipped with security modules generally involve the following principles. Content is encrypted by an operator under control words at a head end. The control words are encrypted under a transport key to make security messages known as entitlement control messages (ECM). The encrypted content and the ECMs are broadcast in a data stream to a plurality of receivers. The receivers filter the data stream to extract the ECMs and the encrypted content. The receivers' security modules have access to the transport key or an equivalent key to be able to extract the control words received in the ECMs. However, before being allowed to decrypt an ECM a check is made to verify that the security module actually has the necessary rights to be able to decrypt the content. These rights are usually obtained upon payment of a fee. Once a fee has been paid, the rights are loaded directly into a security module via another type of security message known as Entitlement Management Messages (EMM). These messages can be received either on the broadcast channel along with the content or via another channel. This second type of security message is addressable to one or a group of security modules. We can see then that the broadcast of conditional access content is done therefore in three parts: the encryption of content under control words, the encryption of the control words to form ECMs—decryptable by security modules having the necessary rights and thirdly the granting of rights and handling of such rights using addressable EMMs.

Security modules can be implemented in a variety of manners such as on a microprocessor card, on a smartcard or any electronic module in the form of a badge or key. These modules are generally portable and detachable from the receiver. The most commonly used form has electrical contacts but contactless versions of type ISO 14443 also exist. Another implementation of the security module exists where it is directly soldered inside the receiver, a variation of this being a circuit on a socket or connector such as a SIM module. Yet another implementation is to have the security module integrated on a chip which has another function e.g. on the de-scrambling module or on the microprocessor module of the decoder. The security module can also be implemented in software.

Operators have every interest in trying to prevent third parties from discovering the secret keys stored in a security module since their ability to generate revenue depends on the keys remaining secret. Furthermore, operators will see a dramatic fall in revenue should such keys be shared between colluding third parties on a large scale, such as is possible using a vast network like the internet for example or by cloning legitimate receivers/security modules to manufacture unauthorised receivers/security modules. The security of the keys is based on the fact that the security modules are tamperproof. However it is well known that leaks can happen from time to time. Whenever this happens it is necessary to change the keys used for encrypting the control words, but this would mean having to change all of the security modules or at least to be able to securely deliver new keys to the security modules.

In a similar domain, United States Patent Application publication number US 2009/0016527 A1 describes a method for authenticating a receiving device by a transmitting device whereby the transmitting device transmits a random number to the receiving device; the receiving device signs it with a private key from a pair of asymmetric keys and sends the signed random number back to the transmitter; the transmitter then decrypts the signed random number using the receiver's public key;

if the result compares with the original random number, then the receiver is authenticated. The invention described does not make use of counters.

International Patent Application publication number WO 2006/061837 A2 discloses a method for setting up a secure communication link between two or more devices. The aim here is not so much the authentication of devices involved in the communication but rather the setting up of an encrypted communication session with a particular device once it has been detected. Following detection of a second device by a first device, the second device sends the first device a data string associated with the second device and corresponding to an operational parameter of the second device—for example a unique identification string. This data string is sent over a first communication channel. A second communication channel is then set up between the two devices and data is transmitted between the two devices in a manner which is configured according to the received data string, thereby making the second channel a secure channel.

European Patent Application publication number EP 1 441 525 A1 describes a system for receiving broadcast pay TV services, the system comprising a master terminal and a slave terminal linked to the master terminal. The slave terminal can access protected data received by the master terminal only if the master terminal can send specific data necessary for decrypting the protected data to the slave terminal within a predetermined time deadline. In this case the predetermined deadline is neither associated with nor corresponds to a particular slave terminal. Rather, the deadline is based upon the time that a message would take to travel from the master to the slave given that valid slaves should be located in close proximity to the master. In other words, depending on the predetermined deadline, it can be arranged that terminals which are sufficiently far from the master will not receive the specific data in time. This is useful for instance in a domain where a client is authorised to decrypt data on a plurality of machines within one premises for a preferential tariff. A higher tariff would be applied should the plurality of machines be spread over a plurality of remote locations. Using this technique assurances can be given that a user who has benefited from a preferential tariff does not try to decrypt the protected data on a remote machine by configuring his system to disallow access by machines which are in remote locations from the master device.

United States Patent Application publication number US 2008/0209232 A1 discloses a means for detecting when a security module is involved in control word sharing. The document describes the use of time stamps along with the control words. Each time a control word is passed from the security module to the decoder (or to a plurality of decoders in the case where control word sharing is going on) a calculation of time difference between the successive time stamps is made. If the result of this calculation is consistently below the normal crypto period for many times in succession, then it is an indication that the security module is performing control word sharing.

BRIEF SUMMARY OF THE INVENTION

The present invention provides a method for securely transferring content encrypted under control words from a server towards a receiver via a broadcast communication channel, said receiver comprising a security module, a decryption unit and a slave time counter, said server comprising a reference time counter, said security module and said server being mutually connected via a return communication channel, said method comprising the following steps:

-   -   encrypting, by the server, the control words using key         information;     -   broadcasting the encrypted content and the encrypted control         words on the broadcast communication channel from the server         towards the receiver;     -   defining, by the server, a pre-determined calling time and a         calling time window said calling time and calling window         corresponding to the receiver;     -   monitoring, by the security module, a slave time indicated by         the slave time counter;     -   sending at least one verification message from the security         module towards the server via the return communication channel         when the slave time is equal to a slave calling time, said slave         calling time being derived by the security module based on at         least one defining parameter present within the security module;     -   receiving the verification message by the server at a reference         time indicated by the reference time counter;     -   performing a verification, by the server, said verification at         least determining whether or not a difference between the         reference time and the pre-determined calling time is within the         calling time window;     -   in the case of a positive verification:         -   sending a key message via the return communication path from             the server towards the security module said key message             comprising the key information;         -   extracting, by the security module, the key information from             the key message;         -   decrypting, by the security module, the encrypted control             words using the key information;         -   decrypting, by the decryption unit, the encrypted content             using the control words.

By requiring that a security module send a request to the server within a very specific timeframe in order to be able to receive the necessary keys for decrypting the control words, the method ensures that only legitimate security modules, which have the necessary means to initiate such a request, will be able to access the encrypted content. The method does not have a negative effect on useable broadcast bandwidth and can be easily implemented without requiring a change in users' equipment or performing unwieldy key updates in users' equipment. Furthermore, the method allows for swift and targeted punitive action to be taken against users of security modules which have been used in control word sharing activity.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention will be better understood thanks to the detailed description which follows and the accompanying drawings, which are given as non-limiting examples of embodiments of the invention, namely:

FIG. 1 showing a block diagram of a system in which an embodiment of the present invention may be deployed.

FIG. 2 showing a block diagram of a system in which a further embodiment of the present invention may be deployed.

DETAILED DESCRIPTION

There is a need to provide more security in conditional access systems where decryption keys are stored in a security module. Given the ease with which information can be shared across the internet nowadays, the discovery of transport keys for example, by unscrupulous third parties, could mean that a large number of users of unauthorised equipment may acquire the possibility to decrypt ECMs and therefore decrypt encrypted content without paying for the rights to do so, thus depriving the owner of the encrypted content from revenue to which he would otherwise be entitled.

The present invention therefore aims to provide a means to securely transfer secret keys, such as transport keys for example, to security modules who can prove that they are entitled to receive them rather than building the security modules with the security keys already loaded. This also allows for an operator to quickly and easily modify the keys used to encrypt ECMs for example safe in the knowledge that authorised security modules will be able to follow such modifications and therefore continue being able to decrypt the encrypted content to which they are entitled.

The present invention may be deployed within a conditional access system such as is commonly used in the domain of pay-TV for example. As well as providing a means for an operator to detect unauthorised receiver equipment, it further provides a means for taking punitive action against users of such equipment. The method provided by the invention does not have a negative effect on the broadcast bandwidth and allows for an operator to be able to quickly and efficiently change encryption keys without penalising users of authorised equipment.

FIG. 1 shows a block diagram of a system in which an embodiment of the present invention may be deployed. The operator broadcasts content (AV) encrypted (AVE) under control words (CW) from a head end or server (SVR) to a plurality of receivers (RX) via a broadcast communication channel (CH1). In the manner which is well known in the field of conditional access digital broadcast, the server (SVR) also broadcasts security messages (ECM) along with the encrypted content (AVE) to allow receivers who have the necessary keys to extract the control words (CW). The server (SVR) comprises a reference time counter (CNTR) which is used to keep track of time. The time indicated by the reference time counter is known as the reference time (TR).

The system comprises a plurality of receivers, one of which is indicated in FIG. 1 (RX). The receiver (RX) comprises a security module (SM) and a decryption module (DECR). The decryption module (DECR) is configured to decrypt incoming encrypted content (AVE) using control words (CW) which it receives in encrypted form (ECM) from the security module (SM). The system further comprises a server or head-end (SVR), which broadcasts content encrypted (AVE) under key information (K) to the plurality of receivers via a broadcast communication channel (CH1) as well as the encrypted control words (ECM). Each receiver (RX) is also connected to the server (SVR) via a bi-directional back-channel or return communication path (CH2). In order for a receiver (RX) to receive a message allowing it to extract the key information (K) to decrypt the control words (CW), it has to first send a verification message (V) to the server (SVR) so that the server (SVR) can check whether or not it is a valid receiver (RX). If the server (SVR) decides that the receiver (RX) is a legitimate one, then it sends a key message (M) back to the receiver (RX) via the return communication channel (CH2) and using its security module (SM), the receiver extracts the necessary key information (K) to be used to reveal the control words (CW) contained in the security messages (ECM) and therefore to decrypt the encrypted content (AVE).

It should be appreciated that the return communication path could be any bi-directional communication channel, independent from the broadcast communication channel, such as the internet for example. The return communication path could be realised using readily available WiFi, ADSL or GSM/3G technological means.

The verification procedure used by the server (SVR) is based on the receiver (RX) sending its verification message (V) at a particular time. Indeed, for a positive verification, the receiver (RX) needs to send its verification message (V) at a pre-determined calling time (TP). Practically speaking however, because of latencies within the system, the message (V) may not be received exactly at the pre-determined calling time (TP). Therefore, according to one embodiment of the present invention, a window, known as the calling time window (TW), is defined around the pre-determined calling time (TP) and for a positive verification the message (V) has to arrive within this window (TW).

As described above, following a positive verification, the server (SVR) sends the key message (M) comprising the key information (K) for decrypting the control words (CW) back to the receiver (RX). On the other hand, in the case of a negative verification, the server (SVR) may reply to the receiver (RX) by sending inhibit key information (X) in the key message (M) via the return communication channel (CH2), thus blocking the receiver (RX) from decrypting the broadcast at least for a short period of time, otherwise known as a pre-determined exclusion period (EX). If the receiver (RX) again tries to respond to the server (SVR) and again does so at the wrong time or outwith the expected timeframe, then the server (SVR) can send a further blocking message blocking the decryption for a longer time period and so on until eventually the receiver (RX) is permanently excluded from being able to decrypt broadcasts.

It is worth mentioning at this point that in the case of a negative verification it is also possible that the server (SVR) does not send any reply at all to the receiver (RX). In this case, rather than obtaining a key which may actively block the ability to decrypt further parts of the broadcast the receiver will be able to continue to use whatever key information it was using to decrypt control words until that key information expires or until a particular right has expired. After this time the receiver is no longer able to decrypt the control words. Until this time however, the receiver may have a further opportunity to perform the challenge of sending a verification message at the correct time.

According to the embodiment of the invention described, the server (SVR) comprises a reference counter (CNTR) with which it keeps track of a reference time (TR). The server is thus able to check at what reference time (TR) a receiver (RX) sends its verification message (V). The receiver (RX) comprises a slave counter (CNTRS) which it uses to keep track of a slave time (TS) and it has knowledge of the pre-determined calling time (TP). Comparing the slave time (TS) with the pre-determined calling time (TP), the receiver (RX) thus knows when to send the verification message (V) to the server (SVR). Preferably the slave counter (CNTS) is comprised within the security module (SM) and the security module (SM) undertakes the comparison of the slave time (TS) with the pre-determined calling time (TP) and sends the message (V) to the server (SVR).

According to different embodiments of the present invention, the receiver (RX) gains knowledge of the pre-determined calling time (TP) through communications received from the server (SVR), which is responsible for defining the value (TP). The value (TP) is usually passed in encrypted format. This can be achieved either via the broadcast communication channel (CH1) by including the value (TP) in the security messages (ECM), which are broadcast along with the encrypted content (AVE) as described above. Otherwise, the encrypted pre-determined calling time (TP) can be passed via another type of security message known as entitlement management messages (EMM), also generally known within the field of conditional access digital broadcasting. These messages (EMM) may be sent by the server (SVR) on the broadcast communication channel (CH1) along with the encrypted content (AVE) and are usually addressable in that they are destined for at least a reduced subset of the totality of the plurality of security modules (SM) (receivers) and may even be addressable on a security module by security module basis. Alternatively the return communication channel (CH2) could be to communicate the pre-determined calling time (TP) to individual security modules (SM) (receivers). Another possibility is for each security module (SM) to have a built-in pre-determined calling time (TP) or a value which can be used to derive the pre-determined calling time, which is known to the server (SVR), i.e. set at the factory. It is worth noting that even in the cases above, where the pre-determined calling time (TP) needs to be communicated from the server (SVR) to the receiver (RX), this may be done using a value from which the pre-determined calling time (TP) may be derived rather than the pre-determined calling time (TP) itself.

It is worth noting that embodiments of the present invention allow for different expected arrival times to be pre-determined for different security modules. The server has means for keeping track of which expected arrival time applies to which security module. This means may involve the use of a table to record times against security modules, preferably using either unique addresses or some other unique identifying parameter to reference a security module. It follows then that upon reception of a verification message, the server has to be able to check which security sent it. Naturally, the verification message will further comprise the security module's unique address or some other unique identifying parameter associated with the security module. Otherwise a mathematical calculation could be used where the security module and the server are able to calculate a pre-determined calling time using a seed combined with a unique identifying parameter or a physical or measured parameter pertaining to the security module.

Synchronizing of the slave counter (CNTS) with the reference counter (CNTR) can be achieved by the server (SVR) updating the reference counter (CNTR) in the security module (SM) with the current value of its reference counter (CNTR) through the use of EOMs or EMMs via either the broadcast communication channel (CH1) or through the use of dedicated messages via the return communication channel (CH2).

In another embodiment of the present invention, instead of having a calling time window (TW), the receiver (RX) may be expected simply to prove that it had knowledge of the time that it was expected to reply by for example including the slave time (TS) in the verification message (V). For example, when the slave counter (CNTS) reaches the slave calling time (TC), the current slave time (TS) could be included in the verification message (V), possibly in encrypted form. In this case, the server (SVR) just needs to check whether the slave time (TS) corresponds to the pre-determined calling time (TP) or not.

Yet another embodiment of the present invention is illustrated in FIG. 2. In this embodiment, the receiver (RX) is expected to send the verification message (V) to the server at the pre-determined calling time (TP) but the message (V) also has to include a first pseudo-random number (NS), which can also be verified by the server (SVR). The first pseudo-random number (NS) may be a number generated in the security module (SM) from a seed previously received from the server (SVR). The security module (SM) thus further comprises a number generator (CALCS) in order to calculate the first pseudo-random number (NS). Any of the methods mentioned above for sending the pre-determined calling time (TP), for example via ECM or EMM, could also be used for sending the seed to the security module (SM). The server (SVR) also comprises means (CALCR) for calculating a pseudo-random number and therefore can generate a second pseudo-random number (NR) which it uses to verify the first pseudo-random number (NS) received from the security module (SM).

Rather than using a seed from the server (SVR) to generate the first pseudo-random number (NS), the security module (SM) may use a value of some defining parameter (UA) which allows the server (SVR) to identify a particular security module (SM) or group of security modules. Such defining parameters (UA) could be the security module's unique identifier or the value of a secure register or a physical parameter such as a voltage at some point within the security module (SM) or a frequency measured somewhere on the security module (SM). Another example of a defining parameter is an IP address. It follows then that the verification message sent from the security module to the server will comprise this defining parameter (UA) to allow the server to determine from where the verification message originated.

The present invention thus provides a secure means for broadcasting encrypted content from a server towards a receiver. The method used by the invention requires that a receiver send a verification message to the server at a particular and precise and verifiable time. In order to achieve this, the receiver must have access to a valid slave counter which can be synchronised with a reference counter in the server. A variation of the method further requires that a receiver include a pseudo-random number in the verification message, which can be checked by the receiver. 

1. A method for securely receiving a key for decrypting content in a receiver for receiving and decrypting content, the receiver comprising a security module comprising a slave time counter for keeping track of a slave time and being configured to receive or calculate a value of a predetermined calling time, the method comprising: providing, for authentication at a device external to the receiver, a verification message when a value of the slave time counter is reached, wherein said value of the slave time counter, when subject to a predetermined function, is equal to the value of the predetermined calling time; receiving the key for decrypting the content only if the verification message is authenticated, by a party external to the receiver, as having been provided at a time corresponding, within a predetermined calling time window, to the predetermined calling time.
 2. The method according to claim 1, wherein the verification message is sent to the device external to the receiver when the security module detects that the value of the slave time counter is equal to the value of the predetermined calling time.
 3. The method according to clam 1, wherein the predetermined calling time corresponds to the receiver in that it allows for the receiver to be positively identified.
 4. The method according to claim 1, wherein the external party authenticates the sent message, said authentication involving consulting a reference time counter, the reference time counter having been synchronized with the slave time counter.
 5. The method according to claim 1, wherein the verification message cannot be authenticated as having been provided at a time corresponding to within a predetermined calling time window of the predetermined calling time, the method further comprising: receiving a key message, said key message comprising inhibit key information to disallow the decryption of the content at least for a predetermined exclusion period; extracting, by the security module, the inhibit key information from the key message.
 6. The method according to claim 5, wherein the predetermined exclusion period varies as a function of a number of times a verification message cannot be authenticated as having been provided at a time corresponding to within a predetermined calling time window of the predetermined calling time.
 7. In a server, a method for providing a key, the server comprising a reference time counter for keeping track of a reference time, the method comprising: receiving, at a calling time according to the reference time counter, a verification message, the verification message comprising an identifier; providing the key only if the calling time is equal, within a predetermined calling time window, to a predetermined calling time corresponding to the identifier.
 8. A method for securely transferring a key from a server to a receiver, the server comprising a reference time counter for keeping track of a reference time, the receiver comprising a security module and a slave time counter for keeping track of a slave time and being configured to receive or calculate a value of a predetermined calling time, the method comprising: sending a verification message from the security module to the server when a value of the slave time counter is reached, wherein said value of the slave time counter, when subject to a predetermined function, is equal to the value of the predetermined calling time; defining, by the server, a reception time for receiving the verification message, according to a value of the reference time counter when the verification message is received; transferring the key to the receiver only if the reception time is equal, to within the predetermined calling time window, to the predetermined calling time.
 9. The method according to claim 8, wherein the sending of the verification message is done when the security module detects that the value of the slave time counter is equal to the value of the predetermined calling time.
 10. The method according to clam 8, wherein the predetermined calling time corresponds to the receiver in that it allows for the receiver to be positively identified.
 11. The method according to claim 8, wherein the authentication involves consulting a reference time counter, the reference time counter having been synchronized with the slave time counter.
 12. The method according to claim 8, wherein the verification message cannot be authenticated as having been provided at a time corresponding to within a predetermined calling time window of the predetermined calling time, the method further comprising: receiving a key message, said key message comprising inhibit key information to disallow the decryption of the content at least for a predetermined exclusion period; extracting, by the security module, the inhibit key information from the key message.
 13. The method according to claim 12, wherein the predetermined exclusion period varies as a function of a number of times a verification message cannot be authenticated as having been provided at a time corresponding to within a predetermined calling time window of the predetermined calling time. 